RULE(RULE ID:339080)

Rule General Information
Release Date: 2025-06-18
Rule Name: Yonyou U9 UMWebService.asmx Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyou U9 is a cloud-based ERP system designed for medium and large manufacturing enterprises. It supports multiple organizations, factories, languages, and currencies, and offers integrated solutions for intelligent manufacturing, supply chain, finance, etc., to help enterprises achieve efficient collaboration and digital transformation. There is an arbitrary file reading vulnerability in the UMWebService.asmx of Yonyou U9. Attackers can exploit this vulnerability to read private files on the server.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.